Pods WordPress Plugin SQL Injection Vulnerability

Vulnerability

A SQL injection vulnerability has been identified in the Pods WordPress plugin, affecting versions prior to 3.2.8.2. The issue arises because the plugin fails to properly sanitize and escape a parameter before incorporating it into a SQL statement, which could allow administrators to execute malicious SQL commands.

Impact

Exploitation of this vulnerability could lead to unauthorized SQL command execution, potentially allowing attackers to manipulate the database or access sensitive information.

Remediation

Users are advised to update the Pods WordPress plugin to version 3.2.8.2 or later.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
5.2
impact
5.0
exploitability
6.3
remediation
7.7
relevance
0.0
threat
6.4
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.